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AMENDMENTS TO THE SPECIFICATION 

Please amend the Specification pursuant to 37 C.F.R. § 1.121 as follows: 

I. Please insert the following paragraph before the first line of the Specification: 
Cross-Reference to Related Applications 

This application is a U.S. National Stage Application under 35 U.S.C. §371 of PCT 
international Application No. PCT/EP00/06510, filed July 10, 2000, which claims priority to 
German Patent Application No. DE 199 38 198.4, filed August 12, 1999. Each of these applications 
is incorporated herein by reference as if set forth in its entirety. 

II. Please amend paragraph 0002 on page 1 of the Specification as follows: 

Encryption methods of varied types belong to state of the art and increasingly have 
commercial importance. They are used for sending messages over commonly accessible 
transmission media, but only the owners of a cryptokey beiftg are able to read these messages in 
plain text. 

HI. Please amend paragraph 0016 on page 4 of the Specification as follows: 

In the following, the operating principle of the method will be explained in greater detail. 
The defined subscribers of the method are denoted by Tl-Tn and each individual; that is not 
specifically named a_subscriber is denoted by Ti. All other subscribers involved in the method are 
denoted by I] except for the respective subscriber Ti. The publicly known components of the 
method are a publicly known mathematical group G, preferably the multiplicative group of all 
integral numbers modulo a large prime number p, and an element g of group G, preferably a number 
0 < g < p having large multiplicative order. However, it is also possible to use other suitable 
mathematical structures for group G, for example, the multiplicative group of a finite body or the 
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group of the points of an elliptical curve. In the following, the method will he described on the 
basis of the group of numbers modulo a prime number p. 

IV. Please amend paragraph 0018 on page 5 of the Specification as follows: 

In the second method step, each subscriber Ti computes a common transmission key l< lj : = 
(g' 4 ')'' 1 from received message g 7j for each further subscriber Tj, where i j. Since k' J = [[k 1J ]] 
applies, subscribers Ti and Tj now know a common transmission key k' J and can therefore 
communicate confidentially. 

V. Please amend paragraph 0021 .2 on page 5 of the Specification as follows: 

Referring to Fig. 1, in a method according to the present invention for establishing a 
common key within a group of subscribers, by each subscriber Ti of the at least three subscribers a 
respective message Ni = (g zi mod p) is generated from a publicly known element g of large order of 
a publicly known mathematical group G and a respective random number zi and the respective 
message is sent from the respective subscriber to all other subscribers Tj of the at least three 
subscribers (see block 102). Each respective random number zi is selected or generated by the 
respective subscriber Ti. Then, by each subscriber Ti. a transmission key k' J is generated from the 
messages Nj received from the other subscribers 'lj, j * i, and the respective random number zi 
according to k u : - Nj zl - (g ZJ )" (see block 104). By each subscriber Ti. the respective random 
number zi is sent in encrypted form to all other subscribers Tj by generating the message Mij 
according to Mij := E(k'- i , zi), where E(k' j , zi) being-is_a symmetrical encryption algorithm in which 
the data record zi is encrypted with the transmission key k ,J (sec block 106). Finally, a common key 
k is determined by each subscriber Ti using the respective random number zi and the random 
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numbers zj, j / i, received from the other subscribers according to k: - f(zl , zn), where fbelftg is 
a symmetrical function which is invariant under a permutation of its arguments (see block 1 08). 

VI. Please amend paragraph 0024 on page 6 of the Specification as follows: 

The method according to the present invention is executed according to the following 
method steps: 

1 . Subscriber A sends Na = g za mod p to subscribers B and C, subscriber B sends Nb = 
g zb mod p to subscribers A and C, and subscriber C sends Nc = g zc mod p to subscribers A and B. 

2. Subscriber A computes kab = Nb" 1 mod p and kac = Nc za mod p. Subscribes B and C 
proceed analogously. 

3. Subscriber A sends message Mab - E{kab, za) to subscriber B and message Mac - 
E(kac, za) to subscriber C. Here, E(k, m) denotes the symmetrical encryption of the data record 
with algorithm E under transmission key k' j . Subscrib e s Subscribers B and C proceed analogously. 

VII. Please amend paragraph 0026 on page 6 of the Specification as follows: 

A variant of the method is to assign a special role to one of subscribers Tl-Tn for the 
execution of the second method step. If this role is assigned, for example, to subscriber Tl, then 
method steps 2 and 3 or b and o are executed only by subscriber Tl . In fourth method step 4, all 
subscribers Tl -Tn involved in the method compute common key k according to the assignment k: = 
h(zl, g* 2 , .... g 7 "), it being required for h(xl, x2, xn) to be a function which is symmetrical in 
arguments x2, ... xn. This variant drastically reduces the number of messages to be sent. An 
example of such a function g is, for instance, 

k-hCzTg^.^g^^g^'- g^ 1 ... g"™ 1 , 
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